Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was using a free VPN to access a Germany-only site and forgot I left it on. Then I used my credit card to make online purchases; now I'm concerned about whether who ever runs the free VPN knows my credit card number. Is it possible even if I entered the card info into a https page?

Win 7 64-bit. IE 8.

share|improve this question

If your online purchase was made on a secure site (using https), you shouldn't have to worry. HTTPS encrypts everything between the website and your browser, which your VPN provider cannot decrypt.

Some websites have the bad habit of using https only during the checkout process, and using regular http for everything else (including logging in). Your VPN provider can, in theory, exploit this. If you logged in to a website that saves sensitive info (like your personal details or credit card information), you might want to change your password.

share|improve this answer
A website that saves info? You mean cookies? Does a VPN provider have more access to personal info than an ISP? – verve Feb 4 '12 at 3:37

The last step out from VPN to the server is unencrypted if you did not care to post your card number over https://.

It is always good to read the tourist guide before walking slippery path


Everything that you posted over unencrypted connection (not having https://) is visible on other end of VPN or TOR (and in path between the other end and site you posted it)

In case you used https:// it stays between you and site in the other end, pants dry

share|improve this answer
"The last step out from VPN to the server is unencrypted if you did not care to post your card number over https://." <--- what do mean exactly? I'm unclear. – verve Feb 4 '12 at 3:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.